CVE-2006-7247 SQL injection vulnerability in the Weblinks (com_weblinks) component for Joomla! and Mambo 1.0.9 and earlier allows remote attackers to execute arbitrary SQL commands via the title parameter.
HighCVSS 7.5
EPSS 1.1%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
SQL injection vulnerability in the Weblinks (com_weblinks) component for Joomla! and Mambo 1.0.9 and earlier allows remote attackers to execute arbitrary SQL commands via the title parameter.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| joomla com weblinks | <= 1.0.9 | No fix listed |
References
- 20746 third-party-advisory vendor-advisory
- 1922 exploit
- [oss-security] 20111224 CVE-request 2006: Joomla Web Link Submission title Parameter SQL injection mailing-list
- [oss-security] 20111224 Re: CVE-request 2006: Joomla Web Link Submission title Parameter SQL injection mailing-list
- 26626 vdb-entry